Re: Using multiple radius servers

From: Jason Dachtler (dachtler@xxxxxxxxx)
Date: Thu Sep 21 2000 - 20:23:53 GMT-3

• Next message: kaushik: "RE: NDA violations with this group- OK"
• Previous message: Daniel Ji: "help on Lab practise"
• Maybe in reply to: Atif Awan: "Using multiple radius servers"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
Atif-

1) Set up each radius server as it's own aaa group server
2) Set up two different aaa authentication and authorization commands,
one for each PRI line
3) Assign the aaa list to each PRI under the authentication command

aaa group server radius PRI-SERVER1
 ...
aaa group server radius PRI-SERVER2
 ...

aaa authentication ppp PRI1 group PRI-SERVER1
aaa authentication ppp PRI2 group PRI-SERVER2
aaa authorization network PRI1 group PRI-SERVER1
aaa authorization network PRI2 group PRI-SERVER2

Interface Serial 0:23 (let's say it's a 5300)
 encapsulation ppp
 ppp authentication [chap|pap] PRI1

Interface Serial 1:23
 encapsulation ppp
 ppp authentication [chap|pap] PRI2

-Jason

Atif Awan wrote:
>
> Can i configure an AS5300 in such a manner that users from one PRI get
> authenticated from one radius server and users from another PRI get
> authenticated from another radius server ?
>
> Regards
> Atif

• Next message: kaushik: "RE: NDA violations with this group- OK"
• Previous message: Daniel Ji: "help on Lab practise"
• Maybe in reply to: Atif Awan: "Using multiple radius servers"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:00 GMT-3